EP1675030A1 - Secured views for a CRM database - Google Patents
Secured views for a CRM database Download PDFInfo
- Publication number
- EP1675030A1 EP1675030A1 EP05111771A EP05111771A EP1675030A1 EP 1675030 A1 EP1675030 A1 EP 1675030A1 EP 05111771 A EP05111771 A EP 05111771A EP 05111771 A EP05111771 A EP 05111771A EP 1675030 A1 EP1675030 A1 EP 1675030A1
- Authority
- EP
- European Patent Office
- Prior art keywords
- user
- row
- database
- computer
- view
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Ceased
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F15/00—Digital computers in general; Data processing equipment in general
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
- Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10S707/00—Data processing: database and file management or data structures
- Y10S707/99931—Database or file accessing
- Y10S707/99939—Privileged access
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
- Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10S707/00—Data processing: database and file management or data structures
- Y10S707/99941—Database schema or data structure
- Y10S707/99943—Generating database or data structure, e.g. via user interface
-
- Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10—TECHNICAL SUBJECTS COVERED BY FORMER USPC
- Y10S—TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
- Y10S707/00—Data processing: database and file management or data structures
- Y10S707/99951—File or database maintenance
- Y10S707/99952—Coherency, e.g. same view to multiple users
Definitions
- the present invention generally relates to methods of providing secure access to database tables in a database management system.
- DBMS database management system
- data is stored in one or more data containers.
- Each container contains records and the data within each record is organized into one or more fields.
- the data containers are referred to as tables, the records are referred to as rows, and the fields are referred to as columns.
- object oriented databases the data containers are referred to as object classes, the records are referred to as objects, and the fields are referred to as attributes.
- Other database architectures may use different terminology. The claims of the present application are not limited to any particular type of data container or database architecture.
- CRM customer relationship management
- ERP enterprise resource planning
- FIG. 2 The security model used in prior art systems is shown in Figure 2.
- the DBMS is setup to deny general access to the application database, allowing only the software system itself to access the database, or perhaps, a system administrator. In this manner, all access to the application system data is controlled by the application.
- one option for providing access to the CRM data is to design an interface to the CRM system for extracting necessary data through the CRM system. This can be done by providing APIs to a user to retrieve the data via the CRM system.
- this procedure can be excruciatingly time consuming and complex, as one would need to be adept at programming code to communicate through the application interface. This approach is not a process many data analysts would be suited to perform.
- the claimed method and system may be a tiered security access model in which the DBMS is set to allow discrete access to a CRM database. Users may log on to a DBMS using, for example, an integrated DBMS-operating system authentication protocol and obtain access to an instance of an application database. However, further access to objects contained in the database is restricted to database views. Moreover, this model may only allow for accessing the views to obtain a listing of view identifiers, to obtain a listing of view attributes, and to execute the views.
- the view acts as a secured proxy to a particular table of the database for which it corresponds. Furthermore, security is enabled in a relatively easy way by attaching to the view, simple query conditions that match user role and user privilege to table-row associations and privileges. Additionally, because access is being performed via the DBMS, no further interface methods need to be coded to provide interoperability with secondary applications used to process the CRM data. In this way, efficient data base extraction and query filtering may be performed without the need for code savvy data analysts.
- Figure 1 illustrates a block diagram of a computing system that may operate in accordance with the claims
- Figure 2 illustrates a common configuration for an existing CRM-DBMS model using Microsoft CRM and Microsoft SQL Server
- FIG. 3 illustrates an embodiment of the claimed system
- Figure 4 illustrates a possible set of security parameters for the DBMS in order to implement the method and system of the claims
- Figure 5 illustrates a flow chart of a view definition for an embodiment of the claims.
- Figure 6 illustrates a security procedure implemented using the secured views.
- Fig. 1 illustrates an example of a suitable computing system environment 100 on which a system for the blocks of the claimed method and apparatus may be implemented.
- the computing system environment 100 is only one example of a suitable computing environment and is not intended to suggest any limitation as to the scope of use or functionality of the method and apparatus of the claims. Neither should the computing environment 100 be interpreted as having any dependency or requirement relating to any one component or combination of components illustrated in the exemplary operating environment 100.
- the blocks of the claimed method and apparatus are operational with numerous other general purpose or special purpose computing system environments or configurations.
- Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the methods or apparatus of the claims include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
- program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types.
- the methods and apparatus may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network.
- program modules may be located in both local and remote computer storage media including memory storage devices.
- an exemplary system for implementing the blocks of the claimed method and apparatus includes a general purpose computing device in the form of a computer 110.
- Components of computer 110 may include, but are not limited to, a processing unit 120, a system memory 130, and a system bus 121 that couples various system components including the system memory to the processing unit 120.
- the system bus 121 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures.
- such architectures include Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus also known as Mezzanine bus.
- ISA Industry Standard Architecture
- MCA Micro Channel Architecture
- EISA Enhanced ISA
- VESA Video Electronics Standards Association
- PCI Peripheral Component Interconnect
- Computer 110 typically includes a variety of computer readable media.
- Computer readable media can be any available media that can be accessed by computer 110 and includes both volatile and nonvolatile media, removable and non-removable media.
- Computer readable media may comprise computer storage media and communication media.
- Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data.
- Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed by computer 110.
- Communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media.
- modulated data signal means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal.
- communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared and other wireless media. Combinations of the any of the above should also be included within the scope of computer readable media.
- the system memory 130 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 131 and random access memory (RAM) 132.
- ROM read only memory
- RAM random access memory
- BIOS basic input/output system
- RAM 132 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processing unit 120.
- Fig. 1 illustrates operating system 134, application programs 135, other program modules 136, and program data 137.
- the computer 110 may also include other removable/non-removable, volatile/nonvolatile computer storage media.
- Fig. 1 illustrates a hard disk drive 140 that reads from or writes to non-removable, nonvolatile magnetic media, a magnetic disk drive 151 that reads from or writes to a removable, nonvolatile magnetic disk 152, and an optical disk drive 155 that reads from or writes to a removable, nonvolatile optical disk 156 such as a CD ROM or other optical media.
- removable/non-removable, volatile/nonvolatile computer storage media that can be used in the exemplary operating environment include, but are not limited to, magnetic tape cassettes, flash memory cards, digital versatile disks, digital video tape, solid state RAM, solid state ROM, and the like.
- the hard disk drive 141 is typically connected to the system bus 121 through a non-removable memory interface such as interface 140, and magnetic disk drive 151 and optical disk drive 155 are typically connected to the system bus 121 by a removable memory interface, such as interface 150.
- hard disk drive 141 is illustrated as storing operating system 144, application programs 145, other program modules 146, and program data 147. Note that these components can either be the same as or different from operating system 134, application programs 135, other program modules 136, and program data 137. Operating system 144, application programs 145, other program modules 146, and program data 147 are given different numbers here to illustrate that, at a minimum, they are different copies.
- a user may enter commands and information into the computer 20 through input devices such as a keyboard 162 and pointing device 161, commonly referred to as a mouse, trackball or touch pad.
- Other input devices may include a microphone, joystick, game pad, satellite dish, scanner, or the like.
- These and other input devices are often connected to the processing unit 120 through a user input interface 160 that is coupled to the system bus, but may be connected by other interface and bus structures, such as a parallel port, game port or a universal serial bus (USB).
- a monitor 191 or other type of display device is also connected to the system bus 121 via an interface, such as a video interface 190.
- computers may also include other peripheral output devices such as speakers 197 and printer 196, which may be connected through an output peripheral interface 190.
- the computer 110 may operate in a networked environment using logical connections to one or more remote computers, such as a remote computer 180.
- the remote computer 180 may be a personal computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to the computer 110, although only a memory storage device 181 has been illustrated in Fig. 1.
- the logical connections depicted in Fig. 1 include a local area network (LAN) 171 and a wide area network (WAN) 173, but may also include other networks.
- LAN local area network
- WAN wide area network
- Such networking environments are commonplace in offices, enterprise-wide computer networks, intranets and the Internet.
- the computer 110 When used in a LAN networking environment, the computer 110 is connected to the LAN 171 through a network interface or adapter 170. When used in a WAN networking environment, the computer 110 typically includes a modem 172 or other means for establishing communications over the WAN 173, such as the Internet.
- the modem 172 which may be internal or external, may be connected to the system bus 121 via the user input interface 160, or other appropriate mechanism.
- program modules depicted relative to the computer 110, or portions thereof may be stored in the remote memory storage device.
- Fig. 1 illustrates remote application programs 185 as residing on memory device 181. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used.
- FIG. 2 illustrates a common configuration for an existing CRM-DBMS model using a Microsoft CRM system 200 and Microsoft SQL Server 210.
- Microsoft CRM denies all access to the CRM database via the DBMS, as shown by block 215, except for access by the Microsoft CRM system 200 itself or a system administrator 220 authorized to manage the DBMS.
- Microsoft CRM does provide, however, one additional means for accessing data to the Microsoft CRM database in addition to its user interface. This access is accomplished using a Microsoft CRM application programming interface (“API") called ExecuteQuery 230 that uses Fetch XML, an XML formatted, query command code.
- a user 240 may write Fetch XML commands and send these commands to ExecuteQuery 230.
- API Microsoft CRM application programming interface
- ExecuteQuery may then interpret the Fetch XML query commands, access the Microsoft CRM database 250, and return a result set. While this method appears to bypass the security of the CRM-DBMS structure, the API actually performs Microsoft CRM-based security filtering on the query commands before providing a result set.
- typical users are not usually well equipped to write application level code in order to extract data from applications. Even with the ExecuteQuery interface 230, writing Fetch XML is complicated and time consuming.
- Figure 2 further illustrates Microsoft SQL Server 210 managing several databases 250, 260 containing sets of database tables 251, 261. Often, a separate database instance may be used to house a set of tables for a particular application.
- the DBMS 210 may have one database designated for use as an Microsoft CRM database 250, which may store most of the data related to the CRM system such as customer information and various task information related to the CRM system.
- a DBMS may manage several databases and only have one application database implement the claimed method and system.
- Figure 2 illustrates that for a general user 240, access is blocked to the CRM database 250 and that all access to the CRM data must be done via the CRM system 200, either via an executable or programmatically through an API, such as ExecuteQuery 230.
- FIG. 3 An embodiment of a business process of the claims may be illustrated in Figure 3, which illustrates the use of Microsoft Excel 300 accessing a CRM database 310.
- Microsoft Excel is a common tool for analyzing application data. Because the Microsoft suite provides connection capabilities to any DBMS using SQL and ODBC, Microsoft Excel may connect to a Microsoft SQL Server 320 and subsequently connect to a Microsoft CRM database 310. In fact, many third party systems 330 that provide connection capabilities to a DBMS using SQL and ODBC may connect to Microsoft SQL Server 320. Microsoft Excel may then query for available views 340, which correspond to particular CRM tables 350, and request information. Moreover, this request may provide row filtered results based on role and privilege information of a user 360.
- Prior art systems may continue to require either a completely open database, or a custom interface into the CRM system itself. Also, prior art systems may not provide the unique row-filtering capabilities of certain embodiments of the claimed system, where rows may be filtered based on roles and privileges assigned to the particular user and row.
- Figure 3 may also illustrate that a CRM database 310 has a set of corresponding views 340 for a set of tables 350.
- Each table 350 may be secured against users logged on to the database through the DBMS. Moreover, each table 350 may in fact be hidden from general users 360 to increase security (illustrated by dotted lines).
- the view 340 may act as a proxy for access to the database tables 350. It should be noted that while the views 340 are able to be seen, their actual definitions may be protected in order to prevent users from discovering the implementation of the view. In some instances, it may be appropriate to limit access to the views to: enabling a listing of available views, a listing of parameters for view execution, and execution privileges for executing a chosen view.
- Figure 4 may illustrate the parameter settings for a DBMS in order to implement an embodiment of the claims.
- These parameter settings may be user-specific and may be changed by a system administrator depending on a particular situation. For example, there may be times when the system administrator will allow a business developer to modify the definition of the view, in which case the business developer will be given modification privileges. In other situations, it would may not be appropriate to provide any additional privileges than the settings listed in Figure 4. For example, a salesperson would probably never be given the right to modify the view definition because this would allow the salesperson to view unauthorized data relating to other salespersons. It should be noted that while these settings apply to most DBMS users, the system administrator typically has full access to the database and database objects, including both the tables and views.
- Figure 5 illustrates a flow chart 500 for a view definition of an embodiment of the claims.
- a security routine 501 may check roles 502 and privileges 503 for the data. If a privilege check 503 fails, a record may be returned with empty data sets. Failing a role check 502 may result in hiding a record 509 altogether.
- the view may implement a pick list transformation 505, a mapping of physical column names to logical database names 504, 507, and date-time transformations 506, to make it easier for data analysts to work with the datasets 508.
- a date-time transformation may be used to take a date or time attribute of the table that has one format and transform into a second format, such as an application-based format.
- a picklist transformation may be used to provide a descriptive string to a picklist value.
- a picklist transformation of a shipping action list would transform database picklist values such as 0, 1, 2, 3 into FedEx, UPS, USPostMail, etc.
- a mapping of physical column names to logical database names may allow for user-friendly names to be assigned to column specific names used in a database naming schema.
- CRM systems may integrate a business hierarchy into its security implementation and often include fields in their data entities that correspond to an owner and a business unit.
- An operating system such as Microsoft Windows
- An operating system such as Microsoft Windows
- the secured views may be designed to return rows based on a hierarchical ownership structure that leverages an existing CRM application and operating system environment.
- This potential security checking model is illustrated in Figure 6.
- Access checking procedure 600 first determines if the user is an owner of the object, as illustrated in block 601. If so, then the user has complete access in block 602. If the user is not an object owner, routine 610 determines the required privilege depth to access the object based on the object's ownership affiliation.
- the minimum depth is Local 612. If the object's owning business unit is the same as the user's business unit, block 613, then the minimum required depth is Deep 614. If the object is in the same organization as the user, block 615, then the minimum required depth is Global 616.
- blocks 620, 621, and 622 check to see if the user's privileges have the minimum required depth. If the user's privileges have minimum required depth or greater, as determined in blocks 620, 621, and 622, access is granted in block 602. If not, routine 600 then determines, in block 630, if the object is explicitly shared to the user or a team of which the user is a member. If so, then access is granted in block 602, otherwise access is denied in block 640.
- the privilege depth illustrated in Figure 6 is categorized as basic, local, deep, or global.
- a user with a basic privilege depth has rights to any objects that are owned by that user, shared to that user, or shared to a team of which the user is a member.
- a user with a local privilege depth has rights of a basic privilege depth and also has rights to any objects that are in the user's business unit.
- a user with a deep privilege depth has rights of a local privilege depth and also has rights to any objects that are in sub-businesses of the business-unit to which the user belongs. This includes sub-businesses at any depth, not just an immediate level sub-business, and thus, includes sub-businesses of sub-businesses.
- a user with a global privilege depth has rights to any objects in the user's organization (and thus global is a superset of all the other privilege levels).
- the present claims may rely on a security model that only references discrete ownership attributes of each database object, attributes that are often already part of the general attribute structure of the object.
- security privileges may be processed in sets that are based on ownership affiliations. In this way, processing may be faster.
- the security model of the claimed method and system processes the rows completely in a DBMS, rather than relying on an API, processing may be faster because a dedicated DBMS processing internal instructions will most often be faster than an API retrieving a set of rows over a communication channel and interpreting a large security descriptor.
- users of a CRM-DBMS system may now interface with database tables via virtual tables provided by the secured views. Users may perform data analysis with a host of other analysis tools that are compatible with SQL-ODBC drivers using a security system integrated with the operating system. It provides seamless integration for application suites like Microsoft Office because a user can now use a tool like a query wizard to open views, similar to opening a database table, without the user needing to be aware of the underlying implementation.
- a user could use secured views to import CRM related data into a spreadsheet program such as Excel where numerous statistical operations may be performed on the data. This may be accomplished without knowing any computer coding language because a simple pop-up query wizard type tool may be used.
- the importation may be accomplished without having to proceed through a separate security procedure to access the database because the security is localized to the DBMS.
- the importation and analysis may be accomplished without modifying the underlying data in the database by operating on a view of the data rather than the actual data.
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Physics & Mathematics (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Computer Hardware Design (AREA)
- Bioethics (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- General Health & Medical Sciences (AREA)
- Health & Medical Sciences (AREA)
- Databases & Information Systems (AREA)
- Storage Device Security (AREA)
- Information Retrieval, Db Structures And Fs Structures Therefor (AREA)
Abstract
Description
- The present invention generally relates to methods of providing secure access to database tables in a database management system.
- In a database management system (DBMS), data is stored in one or more data containers. Each container contains records and the data within each record is organized into one or more fields. In a relational database system, the data containers are referred to as tables, the records are referred to as rows, and the fields are referred to as columns. In object oriented databases, the data containers are referred to as object classes, the records are referred to as objects, and the fields are referred to as attributes. Other database architectures may use different terminology. The claims of the present application are not limited to any particular type of data container or database architecture.
- Many applications having extensive data handling requirements often rely on an independent DBMS to help manage application data. Such applications may include business applications, including customer relationship management ("CRM") systems and enterprise resource planning ("ERP") systems. Using a separate, independent DBMS allows application designers to rely on the DBMS to handle complicated bulk data storage functions, while freeing designers to focus on creating application specific functions. In addition to the division of labor benefit, such a dual system model provides a simple and commonly used security framework where security functionality is localized to the application system. For example, many proprietary business applications, including CRM systems using a DBMS, provide access to CRM data only through the CRM system, thereby ensuring that data access and data security are managed through security functions provided by the CRM application. In this model, it is common for the CRM system to implement a closed, private database instance that can only be accessed from the CRM application or by a system administrator for maintenance purposes.
- The security model used in prior art systems is shown in Figure 2. In this security model, the DBMS is setup to deny general access to the application database, allowing only the software system itself to access the database, or perhaps, a system administrator. In this manner, all access to the application system data is controlled by the application.
- One reason that security is channeled away from the DBMS and localized within the business application is that the security functionality of a typical DBMS is often unsuited to handle application specific security requirements. For example, Microsoft SQL Server, a DBMS, provides protection of data to the table level only. Many business applications, such as Microsoft CRM, may require specific row-level protection. In row-level security, result sets are returned with hidden or withheld data rows based on a user's role and privileges. CRM systems such as Microsoft CRM commonly perform this row-level security through the application software either using a general software executable or programmatically through application programming interfaces ("APIs").
- Another reason that many independent software vendors do not want to utilize DBMS level security is that this may require vendor specific design considerations and support for a particular DBMS. This would make cross-compatibility of the software more difficult to implement. In a system in which database security is channeled through the application software itself, there would be much less consideration for the specific DBMS being used with an application.
- While this common security system makes it convenient for CRM system designers to implement localized security, there is often a desire or need to perform analysis on the data stored in an application database that the application itself is not suited, or designed, to perform. In the example of a CRM system, such as Microsoft CRM, there may be a desire to analyze customer data for trends, marketing patterns, demand statistics, budgeting considerations, operating considerations, etc., that the CRM system is not designed to perform. Moreover, there is also no convenient way of sharing Microsoft CRM data with other related business applications, such as enterprise resource planning ("ERP") applications.
- Under the existing security model, one option for providing access to the CRM data is to design an interface to the CRM system for extracting necessary data through the CRM system. This can be done by providing APIs to a user to retrieve the data via the CRM system. However, depending on the CRM system, this procedure can be excruciatingly time consuming and complex, as one would need to be adept at programming code to communicate through the application interface. This approach is not a process many data analysts would be suited to perform.
- Many applications, including the Microsoft suite of office products, e.g. Microsoft Word, Microsoft Excel, Microsoft PowerPoint, etc., are able to access any DBMS supporting SQL and ODBC. Thus, another more convenient option for providing access to a Microsoft CRM database is to open the database for access to a group of users via the DBMS.
However, as mentioned above, a DBMS usually only allows protection down to the table level and does not allow for micro-level protection of row specific information in the tables. A particular business may not want data analysts to see all the row data but only a subset of the rows. If this option were to be implemented, additional business process changes may need to be made in terms of changing employee business roles and creating new business roles, something that many independent software vendors ("ISVs") would not like to burden consumers with. Moreover allowing an open database connection would increase the risk of corruption of application data which could greatly harm a business. While opening the database to a system administrator would be reasonable, opening a database for full access to a group of data analysts creates problems in security that would make a database such as a CRM database susceptible to compromise. - Therefore, there is a need for an improved method and system of accessing data in a secured application database via the DBMS without compromising the security intentions of the secured application.
- The claims of the present application recite a method and system for accessing information in an otherwise inaccessible application database of a DBMS using view definitions that implement a security protocol. While the specific method and system will be described to apply to a CRM system embodiment, specifically, Microsoft CRM, it is emphasized that this system may be applied to other secure application databases as well.
- The claimed method and system may be a tiered security access model in which the DBMS is set to allow discrete access to a CRM database. Users may log on to a DBMS using, for example, an integrated DBMS-operating system authentication protocol and obtain access to an instance of an application database. However, further access to objects contained in the database is restricted to database views. Moreover, this model may only allow for accessing the views to obtain a listing of view identifiers, to obtain a listing of view attributes, and to execute the views.
- The view acts as a secured proxy to a particular table of the database for which it corresponds. Furthermore, security is enabled in a relatively easy way by attaching to the view, simple query conditions that match user role and user privilege to table-row associations and privileges. Additionally, because access is being performed via the DBMS, no further interface methods need to be coded to provide interoperability with secondary applications used to process the CRM data. In this way, efficient data base extraction and query filtering may be performed without the need for code savvy data analysts.
- Figure 1 illustrates a block diagram of a computing system that may operate in accordance with the claims;
- Figure 2 illustrates a common configuration for an existing CRM-DBMS model using Microsoft CRM and Microsoft SQL Server;
- Figure 3 illustrates an embodiment of the claimed system;
- Figure 4 illustrates a possible set of security parameters for the DBMS in order to implement the method and system of the claims;
- Figure 5 illustrates a flow chart of a view definition for an embodiment of the claims; and
- Figure 6 illustrates a security procedure implemented using the secured views.
- Although the following text sets forth a detailed description of numerous different embodiments, it should be understood that the legal scope of the description is defined by the words of the claims set forth at the end of this patent. The detailed description is to be construed as exemplary only and does not describe every possible embodiment since describing every possible embodiment would be impractical, if not impossible. Numerous alternative embodiments could be implemented, using either current technology or technology developed after the filing date of this patent, which would still fall within the scope of the claims.
- It should also be understood that, unless a term is expressly defined in this patent using the sentence "As used herein, the term '____' is hereby defined to mean..." or a similar sentence, there is no intent to limit the meaning of that term, either expressly or by implication, beyond its plain or ordinary meaning, and such term should not be interpreted to be limited in scope based on any statement made in any section of this patent (other than the language of the claims). To the extent that any term recited in the claims at the end of this patent is referred to in this patent in a manner consistent with a single meaning, that is done for sake of clarity only so as to not confuse the reader, and it is not intended that such claim term be limited, by implication or otherwise, to that single meaning. Finally, unless a claim element is defined by reciting the word "means" and a function without the recital of any structure, it is not intended that the scope of any claim element be interpreted based on the application of 35 U.S.C. § 112, sixth paragraph.
- Fig. 1 illustrates an example of a suitable
computing system environment 100 on which a system for the blocks of the claimed method and apparatus may be implemented. Thecomputing system environment 100 is only one example of a suitable computing environment and is not intended to suggest any limitation as to the scope of use or functionality of the method and apparatus of the claims. Neither should thecomputing environment 100 be interpreted as having any dependency or requirement relating to any one component or combination of components illustrated in theexemplary operating environment 100. - The blocks of the claimed method and apparatus are operational with numerous other general purpose or special purpose computing system environments or configurations. Examples of well known computing systems, environments, and/or configurations that may be suitable for use with the methods or apparatus of the claims include, but are not limited to, personal computers, server computers, hand-held or laptop devices, multiprocessor systems, microprocessor-based systems, set top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments that include any of the above systems or devices, and the like.
- The blocks of the claimed method and apparatus may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The methods and apparatus may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including memory storage devices.
- With reference to Fig. 1, an exemplary system for implementing the blocks of the claimed method and apparatus includes a general purpose computing device in the form of a
computer 110. Components ofcomputer 110 may include, but are not limited to, aprocessing unit 120, asystem memory 130, and asystem bus 121 that couples various system components including the system memory to theprocessing unit 120. Thesystem bus 121 may be any of several types of bus structures including a memory bus or memory controller, a peripheral bus, and a local bus using any of a variety of bus architectures. By way of example, and not limitation, such architectures include Industry Standard Architecture (ISA) bus, Micro Channel Architecture (MCA) bus, Enhanced ISA (EISA) bus, Video Electronics Standards Association (VESA) local bus, and Peripheral Component Interconnect (PCI) bus also known as Mezzanine bus. -
Computer 110 typically includes a variety of computer readable media. Computer readable media can be any available media that can be accessed bycomputer 110 and includes both volatile and nonvolatile media, removable and non-removable media. By way of example, and not limitation, computer readable media may comprise computer storage media and communication media. Computer storage media includes both volatile and nonvolatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tape, magnetic disk storage or other magnetic storage devices, or any other medium which can be used to store the desired information and which can accessed bycomputer 110. Communication media typically embodies computer readable instructions, data structures, program modules or other data in a modulated data signal such as a carrier wave or other transport mechanism and includes any information delivery media. The term "modulated data signal" means a signal that has one or more of its characteristics set or changed in such a manner as to encode information in the signal. By way of example, and not limitation, communication media includes wired media such as a wired network or direct-wired connection, and wireless media such as acoustic, RF, infrared and other wireless media. Combinations of the any of the above should also be included within the scope of computer readable media. - The
system memory 130 includes computer storage media in the form of volatile and/or nonvolatile memory such as read only memory (ROM) 131 and random access memory (RAM) 132. A basic input/output system 133 (BIOS), containing the basic routines that help to transfer information between elements withincomputer 110, such as during start-up, is typically stored inROM 131.RAM 132 typically contains data and/or program modules that are immediately accessible to and/or presently being operated on by processingunit 120. By way of example, and not limitation, Fig. 1 illustratesoperating system 134,application programs 135,other program modules 136, andprogram data 137. - The
computer 110 may also include other removable/non-removable, volatile/nonvolatile computer storage media. By way of example only, Fig. 1 illustrates ahard disk drive 140 that reads from or writes to non-removable, nonvolatile magnetic media, amagnetic disk drive 151 that reads from or writes to a removable, nonvolatilemagnetic disk 152, and anoptical disk drive 155 that reads from or writes to a removable, nonvolatileoptical disk 156 such as a CD ROM or other optical media. Other removable/non-removable, volatile/nonvolatile computer storage media that can be used in the exemplary operating environment include, but are not limited to, magnetic tape cassettes, flash memory cards, digital versatile disks, digital video tape, solid state RAM, solid state ROM, and the like. Thehard disk drive 141 is typically connected to thesystem bus 121 through a non-removable memory interface such asinterface 140, andmagnetic disk drive 151 andoptical disk drive 155 are typically connected to thesystem bus 121 by a removable memory interface, such asinterface 150. - The drives and their associated computer storage media discussed above and illustrated in Fig. 1, provide storage of computer readable instructions, data structures, program modules and other data for the
computer 110. In Fig. 1, for example,hard disk drive 141 is illustrated as storingoperating system 144,application programs 145,other program modules 146, andprogram data 147. Note that these components can either be the same as or different fromoperating system 134,application programs 135,other program modules 136, andprogram data 137.Operating system 144,application programs 145,other program modules 146, andprogram data 147 are given different numbers here to illustrate that, at a minimum, they are different copies. A user may enter commands and information into the computer 20 through input devices such as akeyboard 162 andpointing device 161, commonly referred to as a mouse, trackball or touch pad. Other input devices (not shown) may include a microphone, joystick, game pad, satellite dish, scanner, or the like. These and other input devices are often connected to theprocessing unit 120 through auser input interface 160 that is coupled to the system bus, but may be connected by other interface and bus structures, such as a parallel port, game port or a universal serial bus (USB). Amonitor 191 or other type of display device is also connected to thesystem bus 121 via an interface, such as avideo interface 190. In addition to the monitor, computers may also include other peripheral output devices such asspeakers 197 andprinter 196, which may be connected through an outputperipheral interface 190. - The
computer 110 may operate in a networked environment using logical connections to one or more remote computers, such as aremote computer 180. Theremote computer 180 may be a personal computer, a server, a router, a network PC, a peer device or other common network node, and typically includes many or all of the elements described above relative to thecomputer 110, although only amemory storage device 181 has been illustrated in Fig. 1. The logical connections depicted in Fig. 1 include a local area network (LAN) 171 and a wide area network (WAN) 173, but may also include other networks. Such networking environments are commonplace in offices, enterprise-wide computer networks, intranets and the Internet. - When used in a LAN networking environment, the
computer 110 is connected to theLAN 171 through a network interface oradapter 170. When used in a WAN networking environment, thecomputer 110 typically includes amodem 172 or other means for establishing communications over theWAN 173, such as the Internet. Themodem 172, which may be internal or external, may be connected to thesystem bus 121 via theuser input interface 160, or other appropriate mechanism. In a networked environment, program modules depicted relative to thecomputer 110, or portions thereof, may be stored in the remote memory storage device. By way of example, and not limitation, Fig. 1 illustrates remote application programs 185 as residing onmemory device 181. It will be appreciated that the network connections shown are exemplary and other means of establishing a communications link between the computers may be used. - Figure 2 illustrates a common configuration for an existing CRM-DBMS model using a
Microsoft CRM system 200 andMicrosoft SQL Server 210. Currently, Microsoft CRM denies all access to the CRM database via the DBMS, as shown byblock 215, except for access by theMicrosoft CRM system 200 itself or asystem administrator 220 authorized to manage the DBMS. Microsoft CRM does provide, however, one additional means for accessing data to the Microsoft CRM database in addition to its user interface. This access is accomplished using a Microsoft CRM application programming interface ("API") calledExecuteQuery 230 that uses Fetch XML, an XML formatted, query command code. Auser 240 may write Fetch XML commands and send these commands toExecuteQuery 230. ExecuteQuery may then interpret the Fetch XML query commands, access theMicrosoft CRM database 250, and return a result set. While this method appears to bypass the security of the CRM-DBMS structure, the API actually performs Microsoft CRM-based security filtering on the query commands before providing a result set. As noted above, typical users are not usually well equipped to write application level code in order to extract data from applications. Even with theExecuteQuery interface 230, writing Fetch XML is complicated and time consuming. - Figure 2 further illustrates
Microsoft SQL Server 210 managingseveral databases Microsoft CRM system 200, theDBMS 210 may have one database designated for use as anMicrosoft CRM database 250, which may store most of the data related to the CRM system such as customer information and various task information related to the CRM system. A DBMS may manage several databases and only have one application database implement the claimed method and system. For theCRM database 250, Figure 2 illustrates that for ageneral user 240, access is blocked to theCRM database 250 and that all access to the CRM data must be done via theCRM system 200, either via an executable or programmatically through an API, such asExecuteQuery 230. - An embodiment of a business process of the claims may be illustrated in Figure 3, which illustrates the use of
Microsoft Excel 300 accessing aCRM database 310. Microsoft Excel is a common tool for analyzing application data. Because the Microsoft suite provides connection capabilities to any DBMS using SQL and ODBC, Microsoft Excel may connect to aMicrosoft SQL Server 320 and subsequently connect to aMicrosoft CRM database 310. In fact, manythird party systems 330 that provide connection capabilities to a DBMS using SQL and ODBC may connect toMicrosoft SQL Server 320. Microsoft Excel may then query foravailable views 340, which correspond to particular CRM tables 350, and request information. Moreover, this request may provide row filtered results based on role and privilege information of auser 360. Prior art systems may continue to require either a completely open database, or a custom interface into the CRM system itself. Also, prior art systems may not provide the unique row-filtering capabilities of certain embodiments of the claimed system, where rows may be filtered based on roles and privileges assigned to the particular user and row. - Figure 3 may also illustrate that a
CRM database 310 has a set ofcorresponding views 340 for a set of tables 350. Each table 350 may be secured against users logged on to the database through the DBMS. Moreover, each table 350 may in fact be hidden fromgeneral users 360 to increase security (illustrated by dotted lines). Theview 340 may act as a proxy for access to the database tables 350. It should be noted that while theviews 340 are able to be seen, their actual definitions may be protected in order to prevent users from discovering the implementation of the view. In some instances, it may be appropriate to limit access to the views to: enabling a listing of available views, a listing of parameters for view execution, and execution privileges for executing a chosen view. - Figure 4 may illustrate the parameter settings for a DBMS in order to implement an embodiment of the claims. These parameter settings may be user-specific and may be changed by a system administrator depending on a particular situation. For example, there may be times when the system administrator will allow a business developer to modify the definition of the view, in which case the business developer will be given modification privileges. In other situations, it would may not be appropriate to provide any additional privileges than the settings listed in Figure 4. For example, a salesperson would probably never be given the right to modify the view definition because this would allow the salesperson to view unauthorized data relating to other salespersons. It should be noted that while these settings apply to most DBMS users, the system administrator typically has full access to the database and database objects, including both the tables and views.
- Figure 5 illustrates a
flow chart 500 for a view definition of an embodiment of the claims. In this flow chart, asecurity routine 501 may checkroles 502 andprivileges 503 for the data. If aprivilege check 503 fails, a record may be returned with empty data sets. Failing a role check 502 may result in hiding arecord 509 altogether. Also, in addition to the security filtering, the view may implement apick list transformation 505, a mapping of physical column names tological database names time transformations 506, to make it easier for data analysts to work with thedatasets 508. A date-time transformation may be used to take a date or time attribute of the table that has one format and transform into a second format, such as an application-based format. A picklist transformation may be used to provide a descriptive string to a picklist value. For example, a picklist transformation of a shipping action list would transform database picklist values such as 0, 1, 2, 3 into FedEx, UPS, USPostMail, etc. Also, a mapping of physical column names to logical database names may allow for user-friendly names to be assigned to column specific names used in a database naming schema. - CRM systems may integrate a business hierarchy into its security implementation and often include fields in their data entities that correspond to an owner and a business unit. An operating system, such as Microsoft Windows, may also contain a hierarchical structure affiliating user roles with groups, where the roles have a set of privileges. In an embodiment of claims, the secured views may be designed to return rows based on a hierarchical ownership structure that leverages an existing CRM application and operating system environment. This potential security checking model is illustrated in Figure 6.
Access checking procedure 600 first determines if the user is an owner of the object, as illustrated inblock 601. If so, then the user has complete access inblock 602. If the user is not an object owner, routine 610 determines the required privilege depth to access the object based on the object's ownership affiliation. If the user and object belong to the same business unit, block 611, then the minimum depth isLocal 612. If the object's owning business unit is the same as the user's business unit, block 613, then the minimum required depth is Deep 614. If the object is in the same organization as the user, block 615, then the minimum required depth isGlobal 616. Once the minimum privilege depth is calculated, blocks 620, 621, and 622 check to see if the user's privileges have the minimum required depth. If the user's privileges have minimum required depth or greater, as determined inblocks block 602. If not, routine 600 then determines, inblock 630, if the object is explicitly shared to the user or a team of which the user is a member. If so, then access is granted inblock 602, otherwise access is denied inblock 640. - The privilege depth illustrated in Figure 6 is categorized as basic, local, deep, or global. A user with a basic privilege depth has rights to any objects that are owned by that user, shared to that user, or shared to a team of which the user is a member. A user with a local privilege depth has rights of a basic privilege depth and also has rights to any objects that are in the user's business unit. A user with a deep privilege depth has rights of a local privilege depth and also has rights to any objects that are in sub-businesses of the business-unit to which the user belongs. This includes sub-businesses at any depth, not just an immediate level sub-business, and thus, includes sub-businesses of sub-businesses. A user with a global privilege depth has rights to any objects in the user's organization (and thus global is a superset of all the other privilege levels).
- A SQL statement that may be used to implement the security process of Figure 6 is shown below:
- SELECT [Account columns to retrieve]
- FROM Account
- WHERE
- (
- -- object owned by the user
- Account.OwningUser = [Current User ID]
- or
- -- object owned by business unit of user - local access
- Account.OwningBusinessUnit = [Current User Business ID]
- -- role based access
- or
- -- deep access
- (Account.OwningBusinessUnit in Select biz.SubBusinessId from BusinessUnitMap as biz where biz.BusinessId = u.BusinessUnitId) and PrivilegeDepth =
- or
- -- global access
- (Account.OwningBusinessUnit in Select org.SubBusinessId from OrganizationMap org where org.OrganizationId = u.OrganizationId) and PrivilegeDepth =
- or
- -- object shared to the user
- or
- Account.AccountId in
- (
- select POA.ObjectId from PrincipalObjectAccess POA
- join SystemUserPrincipals sup on POA.PrincipalId = sup.PrincipalId
- where sup.SystemUserId = [Current User ID] and
- POA.ObjectTypeCode = 2 AND
- (POA.AccessRightsMask & 1) = 1
- )
- Unlike existing security models that use a security descriptor field to provide bulk instructions for API-based security processing, the present claims may rely on a security model that only references discrete ownership attributes of each database object, attributes that are often already part of the general attribute structure of the object. As described above, security privileges may be processed in sets that are based on ownership affiliations. In this way, processing may be faster. Furthermore, because the security model of the claimed method and system processes the rows completely in a DBMS, rather than relying on an API, processing may be faster because a dedicated DBMS processing internal instructions will most often be faster than an API retrieving a set of rows over a communication channel and interpreting a large security descriptor.
- In addition, users of a CRM-DBMS system may now interface with database tables via virtual tables provided by the secured views. Users may perform data analysis with a host of other analysis tools that are compatible with SQL-ODBC drivers using a security system integrated with the operating system. It provides seamless integration for application suites like Microsoft Office because a user can now use a tool like a query wizard to open views, similar to opening a database table, without the user needing to be aware of the underlying implementation.
- As an example, a user could use secured views to import CRM related data into a spreadsheet program such as Excel where numerous statistical operations may be performed on the data. This may be accomplished without knowing any computer coding language because a simple pop-up query wizard type tool may be used. In addition, the importation may be accomplished without having to proceed through a separate security procedure to access the database because the security is localized to the DBMS. Finally, the importation and analysis may be accomplished without modifying the underlying data in the database by operating on a view of the data rather than the actual data.
- Although the forgoing text sets forth a detailed description of numerous different embodiments, it should be understood that the scope of the patent is defined by the words of the claims set forth at the end of this patent. The detailed description is to be construed as exemplary only and does not describe every possible embodiment because describing every possible embodiment would be impractical, if not impossible. Numerous alternative embodiments may be implemented, using either current technology or technology developed after the filing date of this patent, which would still fall within the scope of the claims.
- Thus, many modifications and variations may be made in the techniques and structures described and illustrated herein without departing from the spirit and scope of the present claims. Accordingly, it should be understood that the methods and apparatus described herein are illustrative only and are not limiting upon the scope of the claims.
Claims (20)
- A computer-readable medium having computer-executable instructions for creating secured views for a database comprising:creating a database comprising at least one database table and at least one database view, wherein the database table has a row ID, a row business unit, and a row owner;allowing a user to access and execute the database view while preventing the user from viewing and directly accessing the database table, wherein the user has an associated user ID, an associated user business unit, an associated user business group, and an associated privilege depth; andselecting a set of rows of the database table for the database view based on at least one parameter from the set of parameters comprising the user ID, the user business unit, the user business group, and the privilege depth, and at least one parameter from the set of parameters comprising the row ID, the row business unit, and the row owner.
- The computer-readable medium of claim 1, further comprising performing a database lookup to obtain the user ID, the user business unit, the user business group, the privilege depth, the row ID, the row business unit, and the row owner.
- The computer-readable medium of claim 1, further comprising searching a cache to obtain at least one of the set comprising the user ID, the user business unit, the user business group, and the privilege depth while performing a database lookup to obtain at least one of the set comprising the row ID, the row business unit, and the row owner.
- The computer-readable medium of claim 1, further comprising selecting a row based on at least one of:whether the user is the row owner;whether the row business unit is the user business unit and whether the privilege depth is local;whether the row business unit is contained in a set of business units associated with the user business unit and whether the privilege depth is deep;whether the row business unit is among a set of business units associated with the user business group and whether the privilege depth is global; andwhether the row ID is associated with the user ID.
- The computer-readable medium of claim 1, further comprising assigning a privilege to a user for viewing and accessing the database view.
- The computer-readable medium of claim 1, further comprising assigning no privilege to a user for viewing and accessing the database table.
- The computer-readable medium of claim 1, further comprising enabling the view to be listed in a SQL list view command.
- The computer-readable medium of claim 5, wherein the privilege comprises allowing a user to view a listing of the view.
- The computer-readable medium of claim 5, wherein the privilege comprises allowing a user to execute the view.
- The computer-readable medium of claim 5, wherein the privilege comprises allowing a user to determine a set of attributes of the view.
- The computer-readable medium of claim 1, further comprising performing at least one of a picklist evaluation on the selected rows, a date-time transformation on the selected rows, a logical name to physical name transformation on the view parameters, and a physical name to logical name transformation on the selected rows.
- The computer-readable medium of claim 1, further comprising returning an empty set if the user does not have the required privilege depth.
- The computer-readable medium of claim 1, further comprising returning a null set if the user does not have a known user ID.
- The computer-readable medium of claim 1, further comprising using a database management system to control access to the database table and views.
- The computer-readable medium of claim 1, further comprising sending the view results to a non-database application via a connection with the database management system.
- The computer-readable medium of claim 15, wherein the non-database application is a spreadsheet program.
- A computer system comprising:an operating system providing a user authentication service;a database management system for managing a set of databases, the database management system using the user authentication service to authenticate a user connecting to the database management system;a customer relationship management system;a customer database accessed by the customer relationship management system through the database management system, wherein the customer database comprises a customer database table;a view definition stored at the customer database for exposing rows of the customer database table, wherein the database management system enables a user logged onto the while preventing the user from viewing and accessing the customer database table;and further wherein the view exposes a row of the customer database table based on at least one parameter from the set of parameters comprising: a user ID, a user business unit, a user business group, and a privilege depth, and at least one parameter from the set of parameters comprising a row ID, a row business unit, and a row owner.
- The system of claim 17, wherein the customer relationship management system comprises a plurality of database tables and a plurality of view definitions, and further wherein each customer database table has a corresponding view definition.
- The system of claim 17, wherein the view definition exposes a row of the customer database table when one of:a user executing the view definition is a row owner;the row business unit is the user business unit and when the privilege depth is local;when the row business unit is among a set of business units associated with the user business unit and when the privilege depth is deep;when the row business unit is among a set of business units associated with the user business group and when the privilege depth is global; andwhen the row ID is associated with the user ID.
- A computing apparatus comprising :a display unit that is capable of generating video images;an input device;a processing apparatus operatively coupled to said display unit and said input device, said processing apparatus comprising a processor and a memory operatively coupled to said processor;a network interface connected to a network and to the processing apparatus;said processing apparatus being programmed to:manage a database comprising a table and a view, wherein the processing apparatus prevents a user from accessing and viewing the table while the processing apparatus allows the user to access and execute the view;and further wherein the view selects a set of rows of the table based on at least one parameter from the set of parameters comprising a user ID, a user business unit, a user business group, and a user privilege depth, and at least one parameter from the set of parameters comprising a row ID, a row business unit, and a row owner.
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/020,446 US7562092B2 (en) | 2004-12-22 | 2004-12-22 | Secured views for a CRM database |
Publications (1)
Publication Number | Publication Date |
---|---|
EP1675030A1 true EP1675030A1 (en) | 2006-06-28 |
Family
ID=35998563
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
EP05111771A Ceased EP1675030A1 (en) | 2004-12-22 | 2005-12-07 | Secured views for a CRM database |
Country Status (7)
Country | Link |
---|---|
US (1) | US7562092B2 (en) |
EP (1) | EP1675030A1 (en) |
JP (1) | JP4906340B2 (en) |
KR (1) | KR101224822B1 (en) |
CN (1) | CN1794232B (en) |
AU (1) | AU2005237168B2 (en) |
CA (1) | CA2526286A1 (en) |
Cited By (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102346744A (en) * | 2010-07-30 | 2012-02-08 | 国际商业机器公司 | Device for processing materialized table in multi-tenancy (MT) application system |
EP2718854A1 (en) * | 2011-06-07 | 2014-04-16 | Workday, Inc. | Role-based security for an object-oriented database system |
Families Citing this family (22)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US8019636B2 (en) * | 2004-09-28 | 2011-09-13 | International Business Machines Corporation | Method, system and program product for planning and managing a call center study |
US9160792B2 (en) * | 2005-04-05 | 2015-10-13 | International Business Machines Corporation | On-demand global server load balancing system and method of use |
US8676845B2 (en) * | 2006-08-22 | 2014-03-18 | International Business Machines Corporation | Database entitlement |
KR100910336B1 (en) | 2006-10-19 | 2009-07-31 | 신동혁 | A system and method for managing the business process model which mapped the logical process and the physical process model |
US9846846B2 (en) * | 2006-11-14 | 2017-12-19 | International Business Machines Corporation | Method and system for analyzing contact studies |
US8402017B2 (en) * | 2006-12-08 | 2013-03-19 | International Business Machines Corporation | Method for altering database views dependent on rules |
US8332922B2 (en) * | 2007-08-31 | 2012-12-11 | Microsoft Corporation | Transferable restricted security tokens |
US8655918B2 (en) * | 2007-10-26 | 2014-02-18 | International Business Machines Corporation | System and method of transforming data for use in data analysis tools |
US20090300019A1 (en) * | 2008-05-30 | 2009-12-03 | Schumberger Technology Corporation | Hierarchical item level entitlement |
US8099788B2 (en) * | 2008-09-16 | 2012-01-17 | Oracle International Corporation | Declarative data security for a rapid application development tool component |
US9753737B2 (en) | 2010-02-03 | 2017-09-05 | Oracle International Corporation | Declarative attribute security using custom properties |
US9183088B2 (en) * | 2010-03-31 | 2015-11-10 | Salesforce.Com, Inc. | Reducing database downtime |
US8805882B2 (en) * | 2011-01-20 | 2014-08-12 | Microsoft Corporation | Programmatically enabling user access to CRM secured field instances based on secured field instance settings |
CN104094261B (en) | 2012-02-01 | 2017-09-22 | 国际商业机器公司 | Access the optimized treatment method and system of restricted data |
US9275112B2 (en) * | 2012-11-09 | 2016-03-01 | Microsoft Technology Licensing, Llc | Filtering views with predefined query |
US20140380139A1 (en) * | 2013-06-21 | 2014-12-25 | Microsoft Corporation | Embedded experience through bidirectional integration of crm applications and spreadsheet applications |
US20150026075A1 (en) * | 2013-07-16 | 2015-01-22 | Microsoft Corporation | Control of crm data based on spreadsheet actions |
US20150286487A1 (en) * | 2014-04-04 | 2015-10-08 | CafeX Communications Inc. | System for monitoring and analyzing application data to proactively offer assistance |
US9824227B2 (en) | 2015-01-26 | 2017-11-21 | Red Hat, Inc. | Simulated control of a third-party database |
US10454938B2 (en) * | 2015-05-28 | 2019-10-22 | International Business Machines Corporation | Dynamic permission roles for cloud based applications |
US11640544B2 (en) | 2020-06-18 | 2023-05-02 | Microsoft Technology Licensing, Llc | Advances in data provisioning including bulk provisioning to aid management of domain-specific data via software data platform |
US11704306B2 (en) | 2020-11-16 | 2023-07-18 | Snowflake Inc. | Restricted views to control information access in a database system |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5751949A (en) * | 1995-05-23 | 1998-05-12 | Mci Corporation | Data security system and method |
US20040044655A1 (en) * | 2002-09-04 | 2004-03-04 | International Business Machines Corporation | Row-level security in a relational database management system |
Family Cites Families (8)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
GB9402935D0 (en) * | 1994-02-16 | 1994-04-06 | British Telecomm | A method for controlling access to a database |
US6134549A (en) * | 1995-03-31 | 2000-10-17 | Showcase Corporation | Client/server computer system having personalizable and securable views of database data |
JP2001003459A (en) * | 1999-06-24 | 2001-01-09 | Sumitomo Metal Ind Ltd | Pipe joint for structural body |
JP2001075854A (en) | 1999-08-31 | 2001-03-23 | Hitachi Ltd | Method and system for data management, and storage medium with data management program stored therein |
US6820082B1 (en) * | 2000-04-03 | 2004-11-16 | Allegis Corporation | Rule based database security system and method |
US6581060B1 (en) * | 2000-06-21 | 2003-06-17 | International Business Machines Corporation | System and method for RDBMS to protect records in accordance with non-RDBMS access control rules |
US6516317B1 (en) * | 2000-12-21 | 2003-02-04 | Oracle Corporation | Method and apparatus for facilitating compartmentalized database user management |
US6976023B2 (en) * | 2002-04-23 | 2005-12-13 | International Business Machines Corporation | System and method for managing application specific privileges in a content management system |
-
2004
- 2004-12-22 US US11/020,446 patent/US7562092B2/en not_active Expired - Fee Related
-
2005
- 2005-11-02 KR KR1020050104436A patent/KR101224822B1/en not_active IP Right Cessation
- 2005-11-09 CA CA002526286A patent/CA2526286A1/en not_active Abandoned
- 2005-11-22 CN CN2005101271209A patent/CN1794232B/en not_active Expired - Fee Related
- 2005-11-25 AU AU2005237168A patent/AU2005237168B2/en not_active Ceased
- 2005-12-07 EP EP05111771A patent/EP1675030A1/en not_active Ceased
- 2005-12-22 JP JP2005370930A patent/JP4906340B2/en not_active Expired - Fee Related
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US5751949A (en) * | 1995-05-23 | 1998-05-12 | Mci Corporation | Data security system and method |
US20040044655A1 (en) * | 2002-09-04 | 2004-03-04 | International Business Machines Corporation | Row-level security in a relational database management system |
Cited By (6)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN102346744A (en) * | 2010-07-30 | 2012-02-08 | 国际商业机器公司 | Device for processing materialized table in multi-tenancy (MT) application system |
US8533159B2 (en) | 2010-07-30 | 2013-09-10 | International Business Machines Corporation | Processing materialized tables in a multi-tenant application system |
CN102346744B (en) * | 2010-07-30 | 2013-11-13 | 国际商业机器公司 | Device for processing materialized table in multi-tenancy (MT) application system |
EP2718854A1 (en) * | 2011-06-07 | 2014-04-16 | Workday, Inc. | Role-based security for an object-oriented database system |
EP2718854A4 (en) * | 2011-06-07 | 2015-04-01 | Workday Inc | Role-based security for an object-oriented database system |
US10872162B2 (en) | 2011-06-07 | 2020-12-22 | Workday, Inc. | Role-based security policy for an object-oriented database system |
Also Published As
Publication number | Publication date |
---|---|
AU2005237168B2 (en) | 2010-11-04 |
CN1794232B (en) | 2010-09-29 |
CN1794232A (en) | 2006-06-28 |
US20060136479A1 (en) | 2006-06-22 |
CA2526286A1 (en) | 2006-06-22 |
KR20060071861A (en) | 2006-06-27 |
JP4906340B2 (en) | 2012-03-28 |
JP2006179009A (en) | 2006-07-06 |
KR101224822B1 (en) | 2013-01-21 |
US7562092B2 (en) | 2009-07-14 |
AU2005237168A1 (en) | 2006-07-06 |
AU2005237168A2 (en) | 2010-06-03 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
AU2005237168B2 (en) | Secured views for a CRM database | |
US7720863B2 (en) | Security view-based, external enforcement of business application security rules | |
US10872162B2 (en) | Role-based security policy for an object-oriented database system | |
US7284010B2 (en) | System and method for storing and retrieving a field of a user defined type outside of a database store in which the type is defined | |
JP4398371B2 (en) | How to control access to a relational database | |
US7539688B2 (en) | Systems and methods for supporting inheritance for user-defined types | |
JP4571746B2 (en) | System and method for selectively defining access to application functions | |
US7886289B2 (en) | Extensibility mechanism for analysis services unified dimensional model | |
US6289344B1 (en) | Context-sensitive authorization in an RDBMS | |
US20050262087A1 (en) | Apparatus and method for maintaining row set security through a metadata interface | |
EP3572963A1 (en) | Database access-control policy enforcement using reverse queries | |
US7346617B2 (en) | Multi-table access control | |
EP1622046A2 (en) | System and method for delayed fetching of designated members of a user defined type | |
US8190673B2 (en) | Enforcement of object permissions in enterprise resource planning software | |
US20060136361A1 (en) | Extensible, customizable database-driven row-level database security | |
Eavis et al. | OLAP authentication and authorization via query re-writing | |
US20040148272A1 (en) | Logical pathname as a reference mechanism for data | |
US20020188774A1 (en) | Virtualizing external data as native data | |
US20020188727A1 (en) | Method for processing external data for access and manipulation through a host operating environment | |
Mogatala | Secure software architecture design for multidatab [a] se system | |
Day et al. | Oracle Database Heterogeneous Connectivity Administrator’s Guide, 11g Release 1 (11.1) B28277-02 |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PUAI | Public reference made under article 153(3) epc to a published international application that has entered the european phase |
Free format text: ORIGINAL CODE: 0009012 |
|
AK | Designated contracting states |
Kind code of ref document: A1 Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
AX | Request for extension of the european patent |
Extension state: AL BA HR MK YU |
|
17P | Request for examination filed |
Effective date: 20061221 |
|
17Q | First examination report despatched |
Effective date: 20070129 |
|
AKX | Designation fees paid |
Designated state(s): AT BE BG CH CY CZ DE DK EE ES FI FR GB GR HU IE IS IT LI LT LU LV MC NL PL PT RO SE SI SK TR |
|
STAA | Information on the status of an ep patent application or granted ep patent |
Free format text: STATUS: THE APPLICATION HAS BEEN REFUSED |
|
18R | Application refused |
Effective date: 20090403 |